PT-2018-10765 · Faststone · Faststone Image Viewer

Mostafa Soliman · Publicado 2018-06-19 · Atualizado 2018-07-02 · CVE-2018-11706

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer version 6.2

Description The issue occurs when a malformed JPEG file is opened, causing a User Mode Write AV at memory address 0x00578dd8 due to mishandling by FSViewer.exe. This could lead to a Denial of Service (DoS) through an Access Violation, and potentially other unspecified impacts.

Recommendations For FastStone Image Viewer version 6.2, consider avoiding the use of FSViewer.exe to open JPEG files until a fix is available. As a temporary workaround, restrict the opening of JPEG files in the application to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2018-11706

Produtos afetados

Faststone Image Viewer

Referências · 3

• 🔥 https://github.com/MostafaSoliman/Security-Advisories/tree/master/CVE-2018-11706 · Exploit
• https://osv.dev/vulnerability/CVE-2018-11706 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-11706 · Nota de Segurança